https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2018-10605.htmlhttps://patchthecve.com/cve/CVE-2018-10605.htmlWed, 17 Jun 2026 01:34:15 +0000HIGH 8.8: Martem TELEM GW6/GWM versions prior to 2.0.87-4018403-k4 may allow unprivileged users to modify/upload a new system configuration or take the full control over the RTU using default credentials to connect to the RTU.https://patchthecve.com/cve/CVE-2018-10609.htmlhttps://patchthecve.com/cve/CVE-2018-10609.htmlWed, 17 Jun 2026 01:34:16 +0000MEDIUM 6.1: Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux_4-01-601cb47 and prior allow improper sanitization of data over a Websocket which may allow cross-site scripting and client-side code execution with target user privileges.https://patchthecve.com/cve/CVE-2018-10607.htmlhttps://patchthecve.com/cve/CVE-2018-10607.htmlWed, 17 Jun 2026 01:34:16 +0000HIGH 7.5: Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux_4-01-601cb47 and prior allow the creation of new connections to one or more IOAs, without closing them properly, which may cause a denial of service within the industrial process control channel.https://patchthecve.com/cve/CVE-2018-10603.htmlhttps://patchthecve.com/cve/CVE-2018-10603.htmlWed, 17 Jun 2026 01:34:15 +0000CRITICAL 9.8: Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux_4-01-601cb47 and prior do not perform authentication of IEC-104 control commands, which may allow a rogue node a remote control of the industrial process.